Hi PWN Community,

I'm Selena Larson, Principal Threat Researcher at Proofpoint. I gave a talk at Day Zero called "Vibe-Coded Phish Slop Is Ruining My Life," which is a fair summary of my year. I track email campaigns from the first lure through to the payload, then write up what the actors are actually doing rather than what the news cycle says they're doing.

Criminals are using AI. Most of what it produces is low quality. In one ten-day stretch we pulled seven near-identical phishing kits carrying the same structural tells in the page source, clearly assembled by a model rather than written by a person. What those crews gained was throughput, not skill. The lures are frequently worse than what a competent human would have written.

Not everything is slop, though. Device code phishing is a genuinely good technique, and it needs no AI at all. The attacker never asks for your password. They abuse the OAuth device authorization flow, get the target to enter a short code on a real Microsoft page, then walk off with valid tokens. There is no fake login page to spot, no credential to rotate afterward, plus the MFA prompt people are trained to distrust never appears.

The gap between those two is what I care about most. If you can tell an actor who got faster from an actor who got better, you can put your effort where it counts. That is good news for defenders, but only if we stop treating every AI headline as a five-alarm fire.

Ask me anything about:

• The Day Zero talk: what phish slop looks like in the wild, at what volume
• The vibe-coded kits: what tipped us off that no human wrote them
• What cybercriminals are actually doing with AI right now, campaign by campaign
• How device code phishing works, plus why the standard MFA advice does not cover it
• How I separate real capability from noise when a new technique shows up
• Where the low-quality output leaves an opening for defenders
• If the output is that bad, why does any of it still work
• Threat intel as a craft, running DISCARDED, where email threats are heading

I'll be here live on Tuesday, Oct 6 from 3 PM to 4 PM ET answering your questions in real time. You can leave questions in advance too, and I'll answer them when I go live.

Looking forward to your questions.

Hi PWN Community! I'm Selena Larson (u/selena_hax) AMA on Oct. 6!

Prompt leaking in enterprise AI applications exposes critical system instructions, permissions, and workflows, posing significant security risks.

This vulnerability is particularly concerning for enterprise agents, which can access tools and data, potentially impacting revenue, compliance, and customer data.

To mitigate prompt leaking, organizations should minimize sensitive information in system prompts, separate agent instructions from user data, and restrict tool and data access based on agent needs.

Source: Rein Security

Thanks to everyone for making PWN (r/pwnhub) the #1 hacking sub on Reddit!

Please continue to support:

1. Engage with Content on PWN so our best community stories gain visibility.

2. Invite Your Friends & Colleagues to Join and make our community stronger.

3. Post News & Information in PWN - Share hacks, breaches, news, and/or tactics / techniques / procedures. Help others learn & stay informed!

👾 Stay sharp. Stay secure.

- MOD TEAM | PWN